Cybersecurity Platform Engineer

At Link Snacks , we show up hungry, roll up our sleeves, plaid or otherwise, and dive straight into the hard work. We don’t hide from challenges; we hunt them down. We push harder, move faster, and take the kinds of big swings that built this business in the North Woods of Wisconsin four decades ago. We’re everyday people who deliver extraordinary results. Innovation, creativity, and urgency aren’t buzzwords, they’re expectations. And just like the real protein snacks we make across our global house of brands: Jack Link’s® , Lorissa’s™ Organic Snacks , Golden Island® , BiFi® , Peperami® and KOOEE!® to name a few, there’s nothing artificial about us. What you see is exactly what you get: humble, gritty, passionate people who show up every day ready to not just be a participate in the meat snack industry that the Link Family created, but to move faster, innovate harder and keep raising the bar so high, the rest of the world needs a ladder just to see it. Dominating this space across the world takes a team. A team that runs together, succeeds together, and celebrates together. A team that’s full of relentless energy and spirit that can only be fueled by one thing: a fist full of our delicious meat snacks. Link Snacks is seeking a Cybersecurity Platform Engineer to join our Global IT organization. This role is responsible for leading the development, configuration, automation, and continuous improvement of enterprise cybersecurity platforms, with a primary focus on Microsoft Defender, Microsoft Purview, cloud security capabilities, and identity and access management (IAM). The Cybersecurity Platform Engineer serves as the technical owner for key security tools and capabilities, ensuring they are properly designed, integrated, governed, monitored, and optimized to reduce risk and support business objectives. This position requires deep hands-on engineering experience, strong cybersecurity fundamentals, and the ability to translate risk, compliance, and operational needs into scalable platform solutions. The Cybersecurity Platform Engineer will partner closely with infrastructure, networking, application, data, OT, and business teams to mature security controls across cloud, endpoint, identity, collaboration, and data protection environments. This role also requires strong automation, documentation, and communication skills to ensure security platforms are operationally sustainable, measurable, and aligned with global business needs. KEY RESPONSIBILITIES Lead the engineering, administration, and continuous improvement of Microsoft Defender capabilities, including Defender for Endpoint, Defender for Office 365, Defender for Cloud Apps, Defender for Identity, Defender XDR, and related security integrations. Design, implement, and mature Microsoft Purview capabilities for data protection, information governance, data loss prevention, insider risk, eDiscovery support, retention, sensitivity labeling, and compliance-driven control enforcement. Engineer cloud security controls across Microsoft Azure and Microsoft 365 environments, including secure configuration baselines, cloud security posture management, workload protection, logging, alerting, policy enforcement, and remediation tracking. Lead identity and access management engineering activities, including Entra ID, Active Directory, Conditional Access, privileged access, access reviews, identity lifecycle automation, service accounts, guest access, and secure authentication patterns. Develop automation, scripts, integrations, and repeatable processes that improve security platform reliability, reduce manual effort, standardize controls, and support consistent enforcement across global environments. Partner with security operations, MDR, SIEM, infrastructure, network, application, data, and OT teams to integrate cybersecurity platforms with detection, response, vulnerability management, incident response, and operational workflows. Create and maintain security platform standards, configuration baselines, procedures, runbooks, diagrams, operational documentation, and audit-ready evidence supporting regulatory and cybersecurity framework requirements. Define and report platform health, control effectiveness, adoption, remediation progress, secure configuration status, and other actionable security metrics for technical teams and leadership stakeholders. Evaluate emerging cybersecurity platform capabilities, Microsoft security roadmap changes, cloud security trends, and industry best practices to recommend practical improvements that strengthen the organization’s security posture. Perform other duties as assigned. Required Qualifications Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field, or equivalent professional experience. 4 + years of hands-on experience engineering, administering, or improving cybersecurity platforms across Microsoft security, cloud security, identity, endpoint, data protection, or security operations domains. Strong foundation in cybersecurity platform engineering, including endpoint security, cloud security, IAM data protection, compliance controls, automation, and incident response support. Proficient in Microsoft security and identity technologies, Windows, Linux, PowerShell, scripting, API-based integrations, and automation of security operations processes. Strong experience with Microsoft Defender, Microsoft Purview, Microsoft Entra ID, Microsoft Intune, Active Directory, Microsoft Sentinel, and Microsoft 365 security and compliance capabilities. Skilled in platform configuration, log analysis, alert tuning, dashboarding, control validation, secure baseline development, and remediation tracking. Proven ability to secure both IT and OT networks, including experience with incident response, alert triaging, and vulnerability management. Proficient in managing identity and access controls, including Active Directory administration and privileged access management. Skilled in executing cybersecurity strategies and enforcing technical policies across enterprise environments. Experienced in working with security frameworks and standards such as ISO 27001, NIST CSF, and GDPR. Capable of managing vendor relationships and coordinating with internal/external stakeholders on security incidents and compliance matters. Strong understanding of cybersecurity principles, risk management, encryption, authentication, and access control. In-depth knowledge of network and infrastructure security, including virtualization, wireless technologies, and email systems. Familiarity with security technologies and tools, including SIEM platforms, automated penetration testing tools, and cloud risk assessment methodologies. Knowledgeable in security design, technical governance, and third-party auditing practices. Ability to communicate complex technical issues clearly and effectively to both technical and non-technical audiences. Demonstrated discretion in handling sensitive and confidential information. Strong adaptability, time management, and independent problem-solving skills. Ability to remain composed under pressure and provide after-hours support when necessary. Willingness to travel up to 10% for training and business-related activities. Preferred Qualifications: Experience serving as the primary engineer or platform owner for capabilities such as Microsoft Defender XDR, Microsoft Purview, Microsoft Sentinel, Defender for Cloud, Tenable Nessus, BeyondTrust, Palo Alto, or similar enterprise security technologies. Experience developing scalable security platform roadmaps, improving control maturity, reducing manual operational effort, and translating security requirements into technical implementation plans. Cybersecurity certifications such as CISSP, CISM, CompTIA Security+, CompTIA CySA+, Microsoft Security, or equivalent practical experience. Experience securing OT/industrial networks in manufacturing or consumer packaged goods environments. Familiarity with Power BI, Fabric, or similar tools for security data analysis and reporting. The starting salarie for this role is $115,000.00 - $130,000.00. Actual salaries will vary based on several factors, including but not limited to external market data, internal equity, location, and candidate skill set and experience. Base pay is just one component of Jack Link’s Total Rewards package for Team Members. Other rewards may include annual incentive and program-specific awards. Jack Link’s provides a variety of benefits to eligible Team Members, including medical, dental and vision benefits, life and disability insurance, 401k participation, paid holidays, and paid time off. PHYSICAL DEMANDS The physical demands described here are representative of those that must be met by a Team Member to be successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job the Team Member is regularly required to sit, use hands to finger, handle, or feel and talk or hear. The Team Member is occasionally required to stand, walk, and reach with hands and arms. The Team Member must occasionally lift and/or more up to twenty-five pounds. Specific vision abilities required by this job include close vision. WORK ENVIRONMENT The work environment characteristics described here are representative of those a Team Member encounters while performing the essential functions of this job. The work environment is a plant/office setting with varying degrees of temperatures and noise levels. Exposure to manufacturing equipment movement and wet/slippery floors. However, the vast amount of work is conducted in a climate-controlled office. Travel may be required. EQUAL EMPLOYMENT OPPORTUNITY EMPLOYER: Jack Link’s provides equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic that is protected by federal, state or local law. E-VERIFY: Jack Link’s is participant in the federal E-Verify program to confirm the identity and employment authorization of all newly hired employees. For information about the E-Verify program, please visit: http://www.uscis.gov/e-verify/employees All your information will be kept confidential according to EEO guidelines.